Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          U7IX/ZE9gXaDa8hlACJNwh7cz/42n7mo8rhqEnzS9hU=
Subject key identifier:   EA:D3:F6:6B:7A:CC:80:A1:E5:9C:DE:F7:18:3C:AB:3E:53:39:DE:ED
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019674548C6FC9FA061CC920E4A2A852BD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0520
Signing time:             Sat 26 Apr 2025 23:00:20 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:20 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:20 +0000
Files and hashes:         1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: ZBR0xoU2QYYAiYdAUvJtgbdwWrgsj0V4yl6GW5YdBT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:8c:6f:c9:fa:06:1c:c9:20:e4:a2:a8:52:bd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Apr 26 23:00:20 2025 GMT
            Not After : Apr 27 23:00:20 2025 GMT
        Subject: CN=ead3f66b7acc80a1e59cdef7183cab3e5339deed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:06:57:65:d8:c3:16:c6:76:16:99:21:c4:
                    07:5d:ca:25:03:e7:3b:e2:fa:d0:7b:04:8c:7d:da:
                    da:6d:2e:d0:56:a0:b2:55:44:14:fa:8e:49:b9:3e:
                    9f:f2:f6:65:7f:60:a3:5a:25:27:8e:f5:70:d3:3c:
                    bb:52:b6:7b:a5:d4:09:50:b1:28:6d:f1:44:2b:65:
                    1c:23:17:fc:a0:88:b9:43:7d:42:b9:21:fd:29:78:
                    6d:94:9c:29:95:cc:5c:92:21:e9:de:00:e1:f0:99:
                    10:91:5e:2c:fb:95:4d:06:e2:03:21:04:5e:37:9c:
                    c4:52:32:48:54:da:0b:c6:f2:75:14:81:50:ab:3c:
                    38:88:f4:0d:8f:f3:4f:f7:66:13:81:ec:3f:f7:14:
                    93:95:51:e3:4d:09:68:17:e7:a2:ba:c7:5c:50:c5:
                    86:d9:2f:5b:7b:3a:2f:d8:ac:72:6b:52:46:f5:0a:
                    0e:06:35:bc:93:5e:13:b6:bb:5b:c4:7a:fc:88:fa:
                    06:31:7e:f5:ec:19:a0:dc:30:0a:ba:49:ec:09:86:
                    aa:ec:a2:68:fd:cf:15:9e:af:b3:54:a5:ce:af:f7:
                    03:fe:e5:db:4f:db:37:65:a6:ca:01:77:8b:82:64:
                    55:62:86:6d:5d:06:79:99:40:f8:57:cb:22:96:22:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D3:F6:6B:7A:CC:80:A1:E5:9C:DE:F7:18:3C:AB:3E:53:39:DE:ED
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:95:61:7a:f0:13:9a:f6:2d:fe:23:de:a4:79:ce:78:5b:
         dc:c5:db:80:0e:b3:4b:16:1c:e8:ea:08:f6:00:63:16:8a:32:
         a7:64:78:ce:b3:5a:b9:98:cb:f9:43:d8:7a:3d:7d:2e:50:2c:
         93:06:30:ed:96:05:80:80:0d:5d:fa:94:78:29:62:81:b8:c0:
         ac:6c:2b:da:f2:ca:39:83:ef:6d:9a:ab:47:45:75:49:cc:7f:
         17:3c:57:6d:fa:7b:51:4b:45:25:04:97:8b:5b:19:ec:5c:73:
         14:64:0b:d2:cf:bd:09:8e:da:d8:a0:b2:d8:fb:43:e2:0c:81:
         6d:65:f9:ce:92:60:25:e3:60:9f:42:f9:f6:f9:c2:ee:f0:87:
         62:3e:14:60:43:72:07:39:9f:1f:7a:ba:cb:ef:cc:4c:88:3e:
         4c:63:51:b1:a6:9d:15:16:2b:9a:f8:7f:d3:95:74:69:2b:4b:
         d4:5c:d3:ae:c4:6b:8d:69:2b:65:db:5c:90:dd:8b:4c:bc:07:
         e5:d7:03:67:0d:34:1c:96:dd:94:f6:15:9b:98:6f:fa:3a:0f:
         4f:ef:db:9e:0a:46:a7:81:f1:aa:f8:e2:e6:d3:26:ad:31:02:
         04:c6:29:26:37:5e:0d:a9:ce:f7:f6:5a:75:c2:42:0b:f5:0e:
         c7:1c:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:33 2025 by rpki-client